lua-resty-acme icon indicating copy to clipboard operation
lua-resty-acme copied to clipboard

按照Synopsis的步骤操作之后,没有生效,访问网站发现使用的是fallback证书,如何查找原因呢?

Open xiangnanscu opened this issue 2 years ago • 3 comments

我准备使用的域名是foo.example.com. 我期望的按官网配置部署到生产服务器上之后, 访问这个网站就应该显示lets encrypt的https.

我尝试源码打log,require("resty.acme.autossl").init是成功了的,比如

AUTOSSL.client

{
  /*7fb97f9d9ed8*/
  account_pkey      : {
    /*7fb97fb096f0*/
    buf            : "cdata<unsigned char [?]>: 0x7fb97fb25b28",
    buf_size       : 512,
    ctx            : "cdata<struct evp_pkey_st *>: 0x55f0fab6fb70",
    key_type       : 6,
    key_type_is_ecx: false,
  },
  account_thumbprint: "tOQBt1lI_7wTbeVzZlcWa6ImndYUA76kfvAUW3v9QJ8",
  challenge_handlers: {
    /*7fb97f9d9f20*/
    "http-01": {
      /*7fb97f9dba78*/
      storage   : {
        /*7fb97f9dabd0*/
        shm: [
          /*7fb9804e6958*/
          "userdata: 0x7fb9804e69e0",
        ],
      },
      uri_prefix: "acme-challenge",
    },
  },
  conf              : {
    /*7fb97f9d9a78*/
    account_email             : "[email protected]",
    account_key               : "-----BEGIN PRIVATE KEY-----\nbasdfsfds\n-----END PRIVATE KEY-----\n",
    api_uri                   : "https://acme-staging-v02.api.letsencrypt.org/directory",
    challenge_start_callback  : "function: 0x7fb97f9d9af8",
    enabled_challenge_handlers: [
      /*7fb97f9d8e40*/
      "http-01",
    ],
    storage_adapter           : "resty.acme.storage.shm",
    storage_config            : {
      /*7fb97f9d8dc0*/
      shm_name: "acme",
    },
  },
  eab_required      : false,
  storage           : {/*7fb97f9dabd0*/},
}

AUTOSSL.config

{
  /*7ff2fa6ba140*/
  account_email   : "[email protected]",
  account_key_path: "conf/account.key",
  domain_whitelist: {
    /*7ff2fa76c9c8*/
    1                : "foo.example.com",
    "foo.example.com": true,
  },
  staging         : true,
  storage_adapter : "resty.acme.storage.shm",
  tos_accepted    : true,
}

xiangnanscu avatar Apr 06 '23 04:04 xiangnanscu

有个疑问,比如要部署的网站是foo.example.com, 那么应该是domain_whitelist = { "foo.example.com" } 还是domain_whitelist = { "example.com" }?

xiangnanscu avatar Apr 06 '23 04:04 xiangnanscu

你好,可以看一下nginx错误日志 domain_whitelist中的值是域名的完整匹配

fffonion avatar Apr 06 '23 14:04 fffonion

@fffonion nginx错误日志没有任何记录...

xiangnanscu avatar Apr 07 '23 01:04 xiangnanscu

closing for inactivity, please open new issue if problem still exists

fffonion avatar Mar 27 '24 16:03 fffonion